Privacy notice

Data controller

Sofus, a sole proprietorship trading as Supplystead, is the data controller for the processing described here.

Balatonmeerlaan 49, 1060 RD Amsterdam, Netherlands
KVK 50937782
VAT NL001433370B64

Contact: hello@supplystead.com.

Information, sources and purposes

For inbound enquiries, we may process your name, professional contact details, company, role, message and correspondence to answer your enquiry and assess or manage a potential supplier or partner relationship. Providing information is voluntary, but without sufficient contact and enquiry details we may be unable to answer or evaluate it.

For proactive B2B opportunity discovery, we may collect relevant professional identity, role, company and contact details from public company websites, public business registers, trade directories and public professional profiles. We use this information to identify and contact potentially relevant suppliers and partners.

Our legitimate interests are operating and developing Supplystead's relevant B2B supplier and partner relationships. We consider the professional context, relevance and reasonable expectations before using public information. Personal information is not sold. We make no automated decisions about people.

Where information was collected indirectly, at first contact or, if personal information is disclosed earlier, at first disclosure, and in any event no later than one month after collection, we provide this notice and the source.

Website and email providers

This site uses no analytics or advertising cookies. Cloudflare provides hosting and security and may process IP addresses, request and routing details, and system and security data. Our legitimate interests are securely delivering the website, maintaining availability and preventing abuse. Cloudflare acts as our processor for customer logs and content and as a controller for some network data; its privacy policy explains the legal bases for its own-controller processing. It uses providers globally and says restricted transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses. Retention depends on the data's purpose, security needs and legal requirements rather than one fixed visitor-log period. See the Cloudflare privacy policy and Cloudflare customer DPA.

Mailbux, operated by US company CloudWish LLC, hosts our email. Mailbux states that mailbox data is stored and processed in Finland and Germany. We have not found a public DPA, subprocessor list or details of safeguards for possible non-EEA remote access, so use of this mailbox for personal information remains subject to contractual confirmation of subprocessors and transfer safeguards.

How long we keep information

We delete unconverted enquiries and prospect records within 12 months after collection or the last meaningful contact. Relationship and statutory records are kept only while needed to manage the relationship and meet applicable legal obligations. While outreach continues, we retain a minimal suppression identifier so objections remain honoured.

Your rights

You may ask for access, correction, erasure, restriction or, where applicable, portability of your information, and you may object to processing based on legitimate interests.

Direct-marketing objection

Your absolute right to object to direct marketing is free and may be used at any time. We will stop that outreach and record the objection immediately.

You may also complain to the Dutch Autoriteit Persoonsgegevens.

Privacy requests

For privacy questions, requests or objections, email hello@supplystead.com.